Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Suggestion] Add option to skip certificate validation #16

Closed
AlphaJack opened this issue Dec 6, 2020 · 2 comments
Closed

[Suggestion] Add option to skip certificate validation #16

AlphaJack opened this issue Dec 6, 2020 · 2 comments

Comments

@AlphaJack
Copy link

I would like to measure how much bandwidth I can trasmit using my personal VPN. I would like to carry my tests behind a HTTPS reverse proxy, so I need NginX and its certificate. Unfortunatly it doesn't seem to work, my guess is because of failed certificate validation (I can't see any verbosity option):

cat server.json

[
 {
  "id": 1,
  "name": "Librespeed test",
  "server": "https://10.1.1.1/",
  "dlURL": "librespeed/garbage.php",
  "ulURL": "librespeed/empty.php",
  "pingURL": "librespeed/empty.php",
  "getIpURL": "librespeed/getIP.php"
  }
]

librespeed-cli --local-json server.json

Using local JSON server list: server.json
Selecting the fastest server based on ping
No server is currently available, please try again later.

If I change "server" with "https://example.org/" the test runs correctly, but it returns results from normal connection, I.E. not inside the VPN. I can also succesfully test with "server" set to "http://10.1.1.1/", as the server instance is also available without the reverse proxy.

Curl has an option to skip certificate validation:
curl https://10.1.1.1/librespeed/

curl: (60) SSL: no alternative certificate subject name matches target host name '10.1.1.1'
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

curl -k https://10.1.1.1/librespeed/

<!doctype html>
 <!-- [...] -->
</html>
maddie added a commit that referenced this issue Dec 7, 2020
@maddie
Allow self signed certs for HTTPS backends (#16)
4676b26
@maddie
Copy link
Collaborator

maddie commented Dec 7, 2020

@AlphaJack I've pushed a commit 4676b26 adding the option --skip-cert-verify, can you build it locally and try if it works for you?

@AlphaJack
Copy link
Author

Thank you, it works now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@maddie @AlphaJack